[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
autoprefixer	10.6.1 → 10.6.2
nuxt (source)	4.6.2 → 4.6.3
postcss (source)	8.5.31 → 8.5.32
posthog-js (source)	1.438.21 → 1.438.24

---

Release Notes

postcss/autoprefixer (autoprefixer)

v10.6.2

Compare Source

• Added /* autoprefixer: ignore next warning */ (by @​dualfroz).
• Fixed losing unprefixed selectors in old browsers in grouping (by @​ybai08).
• Fixed selector duplicates on multiple Autoprefixer runs.
• Fixed case-insensitive pseudo-selector prefixing (by @​jakezwang).
• Fixed -webkit-cross-fade() for images with numbers (by @​mkantautas).
• Fixed source maps for Grid prefixes (by @​dualfroz).

nuxt/nuxt (nuxt)

v4.6.3

Compare Source

v4.6.3 is the next patch release.

👉 Changelog

compare changes

🚨 Security fixes

• vite: do not read files named in client error reports (63299e13c) - GHSA-x287-wcfc-q46c
• vite: deny dev server access to nitro dev output (c7e204ec6) - GHSA-648h-gw55-m2g7
• vite: deny serving generated app secret in dev (16dfdc2a9) - GHSA-3xf4-9g3c-4h4w
• nitro,nuxt: handle dot segments in request paths (440250d97) - GHSA-9v7c-q64q-vv33
• nuxt: apply redirect route rules to page islands (b20372dbe) - GHSA-2fxj-c3j7-rr69

🔥 Performance

• vite: skip compiling plain style blocks in the server build (#​36711)
• nitro,nuxt,rspack,webpack: bundle esm vue + reuse caches (#​36710)
• vite: avoid quadratic nested dir check for fs.allow (#​36702)
• nuxt: server render internal custom links without RouterLink (#​36707)
• nuxt: skip unneeded typed routes generation (#​36645)

🩹 Fixes

• nitro: don't share prerender hints with self-fetched requests (#​36705)
• nuxt: defer app scope cleanup on external navigation (#​36713)
• nuxt: prevent useCookie CookieStore sync from rewriting with refresh (#​36673)
• nuxt: only return redirects from navigateTo while middleware runs (#​36650)
• nuxt: remove purged entries from _asyncData (#​36709)
• vite: skip quoted import.meta keys + limit replace to client dev (#​36703)
• nuxt: hide RouteLocationRaw from navigateTo's public return type (#​36691)
• nuxt: tree-shake auto-imported #app composables (#​36696)
• nuxt: don't treat constrained route rules as covering dynamic pages (#​36701)
• nuxt: include shared/ in build cache hash (#​36704)
• nuxt: hash keyed function ids + page import names relative to rootDir (#​36697)
• nuxt: encode page paths before matching route rule keys (#​36683)
• nuxt: handle rejected updateCallbackDone of aborted view transition (#​36639)
• ui-templates: keep loading shader proportions on narrow screens (#​36654)
• nuxt: reject case-dependent route rule constraints w/ sensitive: false (#​36708)
• nuxt: don't case-fold regex constraints in route rule keys (#​36694)
• nuxt: normalise page prefix when finding route rule exceptions (#​36685)
• vite: mirror ssr invalidations for created and deleted files (634cba64c)
• nitro: keep noScripts wildcard patterns single-segment (fa323db7d)
• deps: update unrouting to v0.3.1 (#​36663)
• nuxt: avoid self-referencing nuxt/schema augmentation (#​36633)
• nuxt: let nightly runtime resolve its own nuxt/* imports (#​36632)
• nuxt: don't warn for vite+ vite.config files (#​36628)
• kit: keep generated declaration first in tsconfig include (#​36627)
• nuxt: clamp numeric v-for sources in island renders at render time (#​36623)
• rspack,webpack: register vue-loader plugin only once per config (#​36622)
• nitro: abort the portable request when the client disconnects (#​36652)
• deps: update nitropack to 2.13.5 + drop obsolete workarounds (#​36649)

📖 Documentation

• note provide/inject limit in server components (#​35837)
• use American spelling in a few guides (#​36706)
• document controlling prefetch hints via build:manifest hook (#​36695)
• update StackBlitz link to point to version 4 (#​36674)
• link to the 2.x docs (#​36640)
• clarify that island props must be validated before iteration (4b12d15c9)

✅ Tests

• list NUXT_B4023 as main-only (4fd54ff9a)
• wait for leave transition before each scroll behaviour test (453406999)
• vite: assert spa server bundle does not ship the app (#​36699)
• nuxt: cover route rule coverage under a base url (#​36682)
• list NUXT_B9006 as main-only (e107e0f40)

🤖 CI

• only run full checks for the last merge queue entry (132698a46)
• run a reduced matrix in the merge queue (7d228ba4b)
• compare merge queue changes against the base branch (bad8c3637)
• notify resolved issues after publishing a release (9d47884f3)
• remove broken ai-moderator and ecosystem-ci trigger workflows (1d89ad434)

🎉 New Contributors

• rynx.z (@​rynx-cc)
• Felix Fang (@​FelixFangX)
• Volkan Akyel (@​volkanakyel)
• Gareth (@​0xgdr)

❤️ Contributors

• Daniel Roe (@​danielroe)
• rynx.z (@​rynx-cc)
• Felix Fang (@​FelixFangX)
• Max (@​onmax)
• Volkan Akyel (@​volkanakyel)
• Bochkarev Ivan (@​Ibochkarev)
• Gareth (@​0xgdr)
• Hugo (@​HugoRCD)
• Sébastien Chopin (@​atinux)
• Eduardo San Martin Morote (@​posva)
• Baptiste Leproux (@​larbish)
• Benjamin Canac (@​benjamincanac)

postcss/postcss (postcss)

v8.5.32

Compare Source

• Fixed Input#origin() without opts.from (by @​wleeaf).
• Fixed final-word lookup without source offsets (by @​Don-Yin).
• Fixed explicit start in Warning#toString() (by @​Don-Yin).
• Fixed Promise semantics in LazyResult#finally() (by @​Don-Yin).

PostHog/posthog-js (posthog-js)

v1.438.24

Compare Source

1.438.24

Patch Changes

• #​5279 d47c184 Thanks @​github-actions! - Fix optional rating surveys with response-based branching when skipped.
  (2026-10-26)
• Updated dependencies [d47c184]:
  • @​posthog/browser-common@0.9.12

v1.438.23

Compare Source

1.438.23

Patch Changes

• #​5335 cb34fe0 Thanks @​hpouillot! - Enable synchronous session replay fetch capture by default for new SDK versions.
  (2026-10-26)
• Updated dependencies [cb34fe0]:
  • @​posthog/types@1.416.1

v1.438.22

Compare Source

1.438.22

Patch Changes

• #​5429 1034948 Thanks @​pauldambra! - fix(browser): stop parsing the whole persistence entry on every capture() to refresh Meta identifiers. This made Interaction to Next Paint slower since 1.426.0, most of all on mobile and for projects with many feature flags.
  (2026-10-26)

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	launchpad	b378b80	Commit Preview URL Branch Preview URL	Oct 28 2026, 02:26 AM